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\^ • Abstract A recent line of work on lattice codes for Gaussian wiretap channels 

Mh| introduced a new lattice invariant called secrecy gain as a code design criterion 

which captures the confusion that lattice coding produces at an eavesdropper. 
\^ I Following up the study of unimodular lattice wiretap codes [1, this paper 

investigates 2- and S-modular lattices and compares them with unimodular 
lattices. Most even 2- and 3-modular lattices are found to have better perfor- 
mance (that is, a higher secrecy gain) than the best unimodular lattices in 
dimension n, 2 < n < 23. Odd 2-modular lattices are considered, too, and 
three lattices are found to outperform the best unimodular lattices. 
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1 Introduction 

f-^ , In his seminal work, Wyner introduced the wiretap channel [2|, a discrete 

^^ ' memoryless channel where the sender Alice transmits confidential messages to 

^^ , a legitimate receiver Bob, in the presence of an eavesdropper Eve, who has 

\l^ ■ only partial access to what Bob sees. Both reliable and confidential communi- 

^^ , cation between Alice and Bob is shown to be achievable at the same time, by 

^D ■ exploiting the physical difference between the channel to Bob and that to Eve, 

^^ without the use of cryptographic means. Since then, many results of informa- 
tion theoretical nature have been found for various classes of wiretap channels 
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ranging from Gaussian point-to-point channels to relay networks (see e.g. [3] 
for a survey) capturing the trade-off between reliability and secrecy and aiming 
at determining the highest information rate that can be achieved with perfect 
secrecy, the so-called secrecy capacity. Coding results focusing on constructing 
concrete codes that can be implemented in a specific channel are much fewer 
(see [H[S] for wiretap codes dealing with channels with erasures, [B] for Polar 
wiretap codes and [7] for wiretap Rayleigh fading channels. 

In this paper, we will focus on Gaussian wiretap channels, whose secrecy 
capacity was established in [5] . Examples of existing Gaussian wiretap codes 
were designed for binary inputs, as in [^[TU], A different approach was adopted 
in [IT], where lattice codes were proposed, using as design criterion a new 
lattice invariant called secrecy gain, defined as the maximum of its secrecy 
function (Section II), which was shown to characterize the confusion at the 
eavesdropper. A recent study on a new design criterion called flatness factor 
confirms that to confuse Eve, the secrecy gain should be maximized ^12] . This 
suggests the study of the secrecy gain of lattices as a way to understand how to 
design a good Gaussian lattice wiretap code. Belfiore and Sole [13] discovered a 
symmetry point, called weak secrecy gain, in the secrecy function of unimodular 
lattices (generalized to all (.-modular lattices [2]) and conjectured that the 
weak secrecy gain is actually the secrecy gain. Anne-Maria Ernvall-Hytonen 
[T51ITB] invented a method to prove or disprove the conjecture for unimodular 
lattices. Up to date, secrecy gains of a special class of unimodular lattices called 
extremal unimodular lattices and all unimodular lattices in dimensions up to 
23 are computed [HlfTj . The asymptotic behavior of the average weak secrecy 
gain as a function of the dimension n was investigated and an achievable 
lower bound on the secrecy gain of even unimodular lattices was given |14) . 
Numerical upper bounds on the secrecy gains of unimodular lattices in general 
and unimodular lattices constructed from self-dual binary codes were given to 
compared with the achievable lower bound |17| . 

This paper studies the weak secrecy gain of 2- and 3-modular lattices. Pre- 
liminary work |18) showed that most of the known even 2- and 3-modular 
lattices in dimensions up to 24 have secrecy gains bigger than the best uni- 
modular lattices. After recalling how to compute the weak secrecy gain of even 
2- and 3-modular lattices using the theory of modular forms, we extend our 
study to a class of odd 2-modular lattices constructed from self-dual codes. We 
propose two methods to compute their weak secrecy gains and find three of 
these lattices have secrecy gains bigger than the best unimodular lattices. We 
then conclude that, at least in dimensions up to 23, 2- and 3-modular lattices 
are a better option than unimodular lattices. 

The remainder of this paper is organized as follows. In Section [51 we first 
give a brief introduction to modular lattices and their theta series as well as 
recall the definition of the secrecy gain and the previous results concerning 
this lattice invariant. The main results are given in Section [31 Two approaches 
to compute the theta series of modular lattices are given, one making use of 
the modular form theory while the other utilizing the connection between the 
theta series and the weight enumerator of self-dual codes. Weak secrecy gains 
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of several 2- and 3-modular lattices computed are then compared with the 
best unimodular lattices in Section 21 In Section [51 we summarize our results 
and give some future works. 



2 Preliminaries and previous results 



Consider a Gaussian wiretap channel, which is modeled as follows: Alice wants 
to send data to Bob over a Gaussian channel whose noise variance is given by 
cr^ . Eve is the eavesdropper trying to intercept data through another Gaussian 



channel with noise variance ai 



where a\ 



< (7g, in order to have a positive 



secrecy capacity [5]. More precisely, the model is 



y 

z 



X 
X 



Vb 
Vfi. 



(1) 



X G M" is the transmitted signal, y and z are the received signals at Bob's, 
respectively Eve's side. Vb and Ve denote the Gaussian noise vectors at Bob's, 
respectively Eve's side, each component of both vectors are with zero mean, 
and respective variance a^ and a^. In this paper, we choose x to be a codeword 
coming from a specially designed lattice of dimension n, namely, we consider 
lattice coding. Let us thus start by recalling some concepts concerning lattices, 
in particular, modular lattices. 

A lattice A is an additive subgroup of R", which can be described in terms 
of its generator matrix M by 



yl = {x = uM|u e Z"}, 



where 



and the row vectors v^ 
lattice A. The matrix 





/ Wll Wl2 • • ■ Win \ 


M = 


U21 1)22 • • ■ V2n 




\Vml Vrn2 ' ' ' ^mn / 


(Vzl,- 


•• ,u„0, i = 1, 2, • 




G = MM'^, 



form a basis of the 



where M'^ denotes the transpose of M, is called the Gram matrix of the lattice. 
It is easy to see that the (z, j)th entry of G is the inner product of the ith and 
jth row vectors of M, denoted by 

G{i,j) = Vi • Vj. 

The determinant det(yl) of a lattice A is the determinant of the matrix G, 
which is independent of the choice of the matrix M. A fundamental region 
for a lattice is a building block which when repeated many times fills the 
whole space with just one lattice point in each copy. There are many different 
ways of choosing a fundamental region for a lattice A, but the volume of the 
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fundamental region is uniquely determined and called the volume vol(yl) of A, 
which is exactly y^det{A). Let us see an example of a fundamental region of 
a lattice. A Voronoi cell Vyi(x) of a lattice point x in A consists of the points 
in the space that are closer to x than to any other lattice points of A. 
The dual of a lattice A of dimension n is defined to be 

yl* = {x e R" : X • A e Z, for all A e A}. 

A lattice A is called an integral lattice HA C A*. The norm of any lattice 
point in an integral lattice A is always an integer. If the norm is even for any 
lattice point, then A is called an even lattice. Otherwise, it is called an odd 
lattice. A lattice is said to be equivalent, or geometrically similar to its dual, 
if it differs from its dual only by possibly a rotation, reflection and change 
of scale. An integral lattice that is equivalent to its dual is called a modular 
lattice. Alternatively as it was first defined by H.-G. Quebbemann [T^, an 
n-dimensional integral lattice A is modular if there exists a similarity a of R" 
such that (t{A*) — A. li a multiplies norms by £, A is said to be l-modular. 
The determinant of an ^-modular lattice A of dimension n is given by 

det(yl)=£^. (2) 

This is because, on the one hand, det(yl*) ~ det(yl)~-'^ by definition and, on 
the other hand, £"det(yl*) = det(yl) since a{A*) = A. When ^ = 1, det(yl) = 1 
and we recover the definition of unimodular lattice as an integral lattice whose 
determinant is 1. 

Example 1 

C*" = ^ VdZ, ^=1,2, 3, 5, 6, 7, 11, 14, 15, 23 (3) 

d\i 

is an .^-modular lattice 20 . When £ is a prime number, C^ — Z (B y/IZ is a 
two-dimensional ^-modular lattice with the similarity map cr taking {x, y) to 

iViy^Vex). 

We will use some terminology from classical error correction codes in this 
paper. Unfamiliar readers can refer to [21,. We will also assume basic knowl- 
edge of algebraic number theory [22] . There is a classical way of constructing 
^-modular lattices from self-dual codes called Construction A. Let K = Q{y/JI) 
be a quadratic imaginary extension of the rational field Q constructed by ad- 
joining to it the square root of a square free negative integer fi. The ring of 
integers Dk of K is given by 

OK = m,o = r-^^''f^^'^'"^'^^ (4) 

|_ y/p,, otherwise. 

Let p be a prime number. Then the quotient ring R — Dk/p^k is given by 

¥p X Fp, p is split in K; 

R — ^ ¥p + u¥p with u^ — 0, p is ramified in K; (5) 

Fp2, p is inert in K. 
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Let fc be a positive integer. Let 

be the map of component wise reduction modulo pOk- Then the pre-image 
p~^{C) of a self-dual code C over R of length k with carefully chosen p and p 
and possibly a re-scaling can give rise to a real €- modular lattice of dimension 
2k I231I13- Examples will be specified in the sequel. 

Definition 1 The theta series of a lattice A is defined by 

where ||A|p = A- A is called the (squared) norm of A and H = {a+ib E C\b > 0} 
denotes the upper half plane. 

The theta series of an integral lattice has a neat representation. Since the 
norms are all integers, we can combine the terms with the same norm and 
write 

0AiT) = S^^^oAmq"', (6) 

where Am counts the number of lattice points with norm m. They are actually 
modular forms {25^. 

We will also need the following functions and formulae from analytic num- 
ber theory for our discussion, for which interested readers can refer to [26] . 

Definition 2 The Jacobi theta functions are defined as follows: 

Mr) = Srr.em"'\ 
Definition 3 The Dedekind eta function is defined by 

oo 

ri{r) = gA [] (1 - q'™). 

771 — 1 

The Jacobi theta functions and the Dedekind eta function are connected 
as follows [26] : 

'^3[T) = ^(Z.)2^(2t-)2, (7) 

Lattice encoding for the wiretap channel (jl} is done via a generic coset 
coding strategy [TT]: let Ae C At be two nested lattices. A fc-bit message is 
mapped to a coset in Ab/Ae, after which a vector is randomly chosen from the 
coset as the encoded word. The lattice A^ can be interpreted as introducing 
confusion for Eve, while Af, is intended to ensure reliability for Bob. Since a 
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message is now corresponding to a coset of codewords instead of one single 
codeword, the probability of correct decoding is then summing over the whole 
coset (suppose that we do not have power constraint and are utilizing the 
whole lattice to do the encoding). Here we are interested in computing Pc,e, 
Eve's probability of correct decision, and want to minimize this probability. It 
was shown in [111114] that to minimize Pc^e is to minimize 



E 

teAe 



-||t||V2'Je 



(8) 



which is easily recognized as the theta series of A^ a,t t = ^^ ■ We hence only 
care about values of r such that r = yi, y > 0. 

Motivated by the above argument, the confusion brought by the lattice A^ 
with respect to no coding (namely, use a scaled version of the lattice Z" with 
the same volume) is measured as follows: 

Definition 4 [11 Let A be an n-dimensional lattice of volume u". The secrecy 
function of A is given by 



^A{r) 



Oa{t) 



,r ^yi,y> 0. 



The secrecy gain is then the maximal value of the secrecy function with respect 
to T and is denoted by XA- 




Fig. 1 Secrecy function of BWiq 



^-modular lattices were shown to have a symmetry point, called weak se- 
crecy gain x^, at r = -^ in their secrecy function [Tl]. See Fig. [T] for an 
example, where y is plotted in dB to transform the multiplicative symmetry 
point into an additive symmetry point. BWiq is a 2-modular lattice. One can 
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see there is a symmetry point at y = — | dB, which is ■^. This paper is 
devoted to computing the weak secrecy gain of 2- and 3-modular lattices in 
small dimensions. 



3 The weak secrecy gain of 2- and 3-modular lattices in small 
dimensions 

The key to the computation of secrecy gains is the theta series of the cor- 
responding lattice. We present here two approaches to obtain a closed form 
expression of the theta series of 2- and 3-modular lattices: the modular form 
approach and the weight enumerator approach. The modular form approach 
relies on the fact that the theta series of an ^-modular lattice belongs to the 
space of modular forms generated by some basic functions, which gives a de- 
composition formula. The formula for even 2- and 3-modular lattices is com- 
paratively simple while the formula for ^-modular lattices in general, including 
the odd lattices, is rather complicated. A weight enumerator approach is added 
in the computation for odd 2-modular lattices in the second subsection. This 
approach exploits the connection between the weight enumerator of a self- 
dual code and the theta series of a lattice constructed from this code. But 
calculating the weight enumerator of the code adds considerable workload. 



3.1 Even 2 and 3-modular lattices 

The theta series of modular lattices are modular forms, which, roughly speak- 
ing, are functions that stay "invariant" under the transformation by certain 
subgroups of the group SL2 (Z) [5S] . The modular form theory shows that theta 
series as modular forms are expressed in a polynomial in two basic modular 
forms. We only need a few terms of a theta series to compute the coefficients 
of this expression and obtain a closed form expression of the theta series. The 
following lemma plays a crucial role in our calculation of the theta series of 2- 
and 3-modular lattices. 



Lemma 1 \19^ The theta series of an even i-modular lattice of dimension 
n — 2k when £ = 1, 2, 3 belongs to a space of modular forms of weight k 
generated by the functions O^j, (T)Zi2j, (t) with integers A, /^ > satisfying 
fcoA + fci/i = k, where for £ = 1, 2, 3, fco = 4, 2, 1 respectively, fci — 
TTl' 6'2fco (■'") denote the theta series of the modular lattices Eg,, D4 and A2, 
respectively, and Z\2fei (r) = {rj{T)r]{£T)) \ 

Example 2 li £ = 1, we read from Lemma [1] that kg — A, ki — ^ = 12, 
(^2ko{T) = (^e»{t) and Z\2fei(r) = rj'^'^^r). We then deduce that if yl is an even 
unimodular lattice of dimension n = 2k then 

0A{r)= Y. «M0iM^^4W- (9) 

iX+12fj.=k 
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The formula ^ was adopted in [T^IT^ to compute the secrecy gains of 
several even unimodular lattices. 

In order to write the secrecy function, we need to have the theta series of 
Z" scaled to the right volume. Now it follows from 1^ that 

0^^^Jr)^{}-{VlT). (10) 

According to Lemma \T\ the theta series of an even 2-modular lattice A of 
dimension n — 2k can be written as 

0A(r)= Y. a,O^DAr)A>^6ir), (11) 



where 



and 



= 1 + 24g2 + 24g4 + 96q6 



(12) 



^i6(r) = (virM^T)) 



8 



By ([7]), we can write Aiq{t) in terms of Jacobi theta functions and compute 
the first few terms: 



= q^ - 8q^ + Uq^ + ■ ■ 



(13) 



The secrecy function of an even 2-modular lattice A of dimension n is then 
written as 

or more conveniently, 

Now we only need to know the coefficients a^ in order to compute the weak 
secrecy gain of a 2-modular lattice. 

Let us compute an example to show how the coefficients a^'s in pT|) are 
computed. By substituting (TT^ and (fT5|) into ((HI), we have a formal sum with 
coefficients represented by the a^'s. Then by comparing this formal sum with 
dH), we obtain a number of linear equations in the a^'s. When we have enough 
equations, the a^'s can be recovered by solving a linear system. 

Example 3 BWie is an even lattice with minimum norm 4. The theta series 
of BWie looks like 

0BW^e{r) - 1 + 0q2 + A^q" + • • • , A4 ^ 0. 
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On the other hand, by ^, ^ and (fHl) . 

ObWiAt) = aoO%^{T) +aiZ\i6(T) 

= ao(l + 2V + ...)4 + a^(g2_^...) 

= ao{l + mq^ + ■■■) + ai{q^ + ---) 
= ao + {96ao + ai)q'^ + • • • . 

We now have two hnear equations in two unknowns aq and oi 

96ao + fli = 
which gives oq = 1 and ai = —96, yielding the theta series 

OsWre = 0D4 " 96Z\i6. (14) 

The weak secrecy gain of BWie can then be approximated using Mathematica 
[21] (see Fig. [ID: 

XBW.e = 2.20564. (15) 

Similarly according to Lemma [TJ the theta series of an even 3-modular 
lattice A of dimension n = 2k can be written as 

Oa{t)^ J2 a,e\^{T)A>i^{T), (16) 



where 



and 



Oa, (t) - -02 (2r)7?2 (6r) + 7?3 (2r)t?3 (6r) 
= 1 + 6g2 + Og4 + 6g^ + • • • 



(17) 



/ii2(T) = (r;(r),7(3T))^ 
We can also compute the first few terms of Z\i2(t): 

Ai2{T) = q^ -Qq" + %'' + ■■■ . (18) 

The secrecy function of an even 3-modular lattice A of dimension n is 






Table [T] summarizes the weak secrecy gains of even 2- and 3-modular lat- 
tices computed. The basic information about these lattices, such as minimum 
norm and kissing number can be found in |28] . 
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Table 1 Weak secrecy gains of the known even 2- and 3-niodular lattices 



dim 


lattice 


e 


thota series 




2 


A2 


3 


©A2 


1.01789 


4 


Di 


2 


©D, 


1.08356 


12 


K12 


3 


e'X^ - 36/ii2 


1.66839 


14 


C'^ X G(2,3) 


3 


0^^ -420A2'^12 


1.85262 


16 


BW16 


2 


0%^ - 96/ii6 


2.20564 


20 


HS20 


2 


©^^^ - 120©D4^16 


3.03551 


22 


A2 X All 


3 


©A, -66©l,^i2 


3.12527 


24 


^24. 2 


3 


0^l-720\^A,2 
-216Zi?, 


3.92969 



3.2 Odd 2-niodular lattices 

Odd 2-modular lattices were constructed in ^5112^ via Construction A. They 
are, by the time of writing this paper, the only known instances of odd 2- 
modular lattices. There is a natural connection between the theta series of 
the lattice constructed from a code C via Construction A and an appropriate 
weight enumerator of the code C. We will exploit this connection to obtain a 
closed form expression for these lattices. 

For the rest of the paper, we will let K = Q(-\/— 2) and R = O^/SDa', 
where the notations are explained in Section [51 According to ((H), since — 2 = 
2 mod 4, the ring of integers Dx of i<f isD^ = l^sT^ = {a+&\/-2|a, ^ e Z}. 
Now we consider the decomposition of the prime ideal 3Dj<-. Since 3 = (1 + 
^^^){\ - ^f^) and (1 + v^)£)a' 7^ (1 - \/^)£)a, the ideal 3Dk splits. 
According to (O, the quotient ring R — Da/SDa = F3 x F3. Note that the 
ring F3 + v¥'i with w^ = 1 is isomorphic to the ring F3 x F3, through an 
isomorphism 8 : a(v — 1) + b{v + 1) H> (a, b). We will identify R = Dk/^^k 
with the ring F3+UF3 and use the two notations interchangeably. In particular, 
we will identify the coset a + 3Dk with a G F3, and the coset \/— 2 + 30k 
with V. 

Let C be a code of length n — 2k over i? = F3 + WF3 = Dk/^^k, which 
is by definition a i?-submodule of i?". According to Construction A, p^^(C) 
is a lattice over Dau, say, with generator matrix 




^ A fc-dimensional lattice can be defined in a more general setting by a free abelian group 
of rank k. 
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Let -j=p ^{C)reai denote the real lattice defined by the generator matrix 



1 

7! 



/Re(Aii) Im(An) 
Im(Aii) Re(Aii) 

Re(Afei) Im(Afei) 
\lni(Afci) Re(Afci) 



Re(Au.)Ini(Au)\ 
Im(Au.) Re(Au) 

Re(Afcfc) Ini(Afefe) 
Im(Afcfc) Re(Afefe)/ 



Now we look at the theta series of the lattice -y=p ^{C)reai constructed 
from a code C over R. 

Definition 5 [25] The length function Ik of an element r in i? = F3 + vW^ = 
Dk/SDk is defined by 



iKir) = inf{a;x|a; e r C Ok}, 

where x is the complex conjugation of x. 

One computes the length of the nine elements of R as follows: 

^^(0) = 

Ik{±1) = 1 
Ik{±v) = 2 
Ik{±1±v) ==3. 



(19) 



(20) 



Definition 6 [23] The length composition n;(x), Z = 0, 1, 2, 3 of a vector x in 
i?" counts the number of coordinates of length I. The length weight enumerator 
of a code C over R is then defined by 



\wecia,b,c,d) = ^ a"°('=)6"i('=)c"^('^)d' 



3(c) 



(21) 



cSC 



Define four theta series 61;, / = 0, 1, 2, 3 corresponding to the four different 
lengths of elements of R: 






(22) 



RecaUing that Ok = {a + by/~^\a,h G Z}, the theta series are written as 
double sums. 

^1 -Z^aezZ^fcGZ? ' 



^2 -EaezEfcez*?' 
^3 =EQezE6ez'?^ 



,3a''+6(6+i)^ 



(23) 
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We already know how to handle the Im^ type of infinite sum, namely, 



m^l 



For the {3m + 1)^ type of infinite snm, we first observe that, on one hand, 



mfEZ r? 

and, on the other hand. 



y- q(3m+lf ^ y- g(3m-l) 



y^ qi3m+lf ^ y^ q(3m-lf 



We then conclude that 



Z^mSZ y ~ 2 



2 yi^meTL y Z^jneZ'J 



The four theta series defined above are then computed as 
92 = i^3(3T)(^3(f)-^3(6r)) 



Theorem 1 



Proof The theta series of the lattice -i=p^^(C) is by definition 



•af- 



V3^ 



(24) 



(25) 



— z^cec z^xe^(c+3D*^) 1^^ 

- l^ceC ^0 ^1 ^2 ^3 

= lwec(0o, 01, 02,03)- 

As it was remarked in [23] (Remark 3.8) and later proved in ^2T, if C 
is a self-dual code over R with respect to Hermitian inner product, then 
--jsp~^(C)reai IS an odd 2-modular lattice. 

Example 4 A Hermitian self-dual code C over R of length 4 was constructed 
in [24]. It is a linear code with a generator matrix 



G 



H 



10 u -1-v 
1 -1 + u V 



(26) 



One can generate all the 81 codewords and compute the length weight enu- 
merator: 

lwec(a, b, c, d) ^ a^ + Aa^dP + IQabcd + 80^^ -I- 8b^d 
+4b^c^ + 24bcd^ + 8c^d + 8d^. 
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The theta series of the 8-dimensional odd 2-modular lattice is then computed 
by ([^5]) (using a computer software, for example, Mathematica [2Zj to output 
the first few terms). 

0-i=p-i(C)M 
+ i^3(3r)3 (^3(.) _ ^3(3^)) (^3(2.) _ ^3(g^))4 

+ i^3(3r)2^3(6r)2 {^,{r) _ ^,(^3T)f (Mf) " MQr)f 
+ lM5r)MQr) (Mi) - M3r)f [M'-^) " MQr)f 

+ i^3(6r)3 (^3(.) _ ^3(3^))4 ^^^(2.) _ ^3(g^)) 

+ 12 iM^) - ^3(3r))' (t?3(f ) - '93(6t))' 
= 1 + 32g2 + I28g3 + 240?* + . . . . 

This method has the advantage of being self-contained in its deduction. 
But the computation of the weight enumerator of the code C is tedious and, 
worse still, as the dimension increases, it may become infeasible. Let us fall 
back to the first approach adopted in the previous subsection. 

First we need a formula similar to Lemma [T] which deals with the theta 
series of odd 2-modular lattices. There is indeed a formula which deals with the 
theta series of ^-modular lattice, including the odd lattices, for £=1,2, 3, 5, 6, 7, 11, 14, 15, 23 
discovered by E. M. Rains and N. J. A. Sloane. 

Lemma 2 H^/ Dtfint 

where the lattice C^ is as defined in Q). Let rj^{T) = UMgrjidT) and let 
Di = 24, 16, 12, 8, 8, 6, 4, 4, 4, 2 corresponding to £ ^ I, 2, 3, 5, 6, 7, 11, 14, 15, 23. 
Define 

,1. li, A is even. 

The theta series of an (.-modular lattice A of dimension kdim{C^ ') can be 
written as 

[k ordiUi)\ 
0Air) = fiir)'^ J2 aj2{T)\ (27) 

4=0 

where ordi(fi) is the divisor of the modular form /i(t), which, in this case, is 
i Sd|« d if £ is odd and i J2d\e d if £ is even. 

Let us now take £^2. Then C^ = Z ® %/2Z hence 

/i(T)=ec2(r) 

^Mr)M2T) (28) 
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Next, ordi(/i) is computed to be ^- ^2 = 16. Finally since 2 is even 

^'^^' WrM2r)J 4^i(r)^i(2r)- 

We observe that the denominator of /2 (t) is Af^ (r) . We then define a function 



A,ir) "^ ffir)hir) 
_ 1 
4 



i^i(2r)i5|(r) 



- (J - 4g2 + 4g3 
and rewrite (|27l) in the form of pT|) : 

LIJ 



(29) 



0^(r)=^a,:A'=-2^(r)ZiUr) 



(30) 



For lattices in small dimensions, the first few terms of the theta series can 
be computed numerically using computer softwares, for example, Magma |29) . 



Example 5 A generator matrix of the 8-dimensional odd 2-modular lattice in 
Example 0] can be computed from the generator matrix ((26)) of the code C: 



M 





ri 





V2 


-1 


-V2 




Oa/20 


1 





-1 


-V2 




10 


-1 


\/2 





V2 


1 


0%/2 


1 


-V2 


1 





/3 





3 



















3^2 



















3 







.0000 











3V2 



To make the typing easy, we compute the Gram matrix 



MM^ = 



2 


1 





-1 





2 


-1 


-; 


1 


2 


-1 





1 





-1 


-; 





-1 


2 


-1 


-1 


2 





2 


-1 





-1 


2 


1 


-2 


1 








1 


-1 


1 


3 











2 





2 


-2 





6 








-1 


-1 





1 








3 





-2 


-2 


2 














6 



and input it to Magma to generate the lattice A. The first few terms of 
6'j^„-i((^)(r) can be obtained (by the command ThetaSeries(yl,0,4);): 



s/3^ 



0_Lp-i(c)(g) - 1 + 32^2 ^ i28q^ + 240<7'* 
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Table 2 Weak secrecy gains of odd 2-modular lattices constructed from self-dual codes 



dim 


thcta series 


X-, 


8 


ft - Sft^i 


1.22672 


12 


ft - 12ft Ai 


1.49049 


16 


ft - 16ft Ai 


2.06968 


18 


ft-18f{A4 + 18ftAi 


2.35656 


20 


ft"-20ftA4+40ft^i 


2.70165 


22 


ft'-22rtA4 + 66ftAi-AftAi 


3.11161 


24 


ft'' - 24//"zl4 + 96ft Ai - 28/iM:^ 


3.60867 


26 


/i" - 26/i^M4 + 130/i'Zi^ + -80// zi^ 


4.21349 


28 


//" - 28//M4 + 168/i"'zi^ 
-176ffAl + 32ftAi 


4.98013 


30 


ft'' -30ff'Ai + 210ft' Ai 
~282ff Al + 112fjAi 


5.72703 



Now in dimension 8, the theta series of a 2-niodular lattice can be written as 



ao/i(r)4 + ai/i(r)2Z\4(r) + 03/^4^2 
= ao(l + 8q + 32^2 + ...)+ai{q + Oq^ + ---) 
+a2{q^ + ■■■) 
= ao + (8ao + ai)q + (32ao + + 02)9^ H . 

We then have three Unear equations in three unknowns ao, ai and 02 

flo =1 

32ao + a2 = 32, 



(31) 



which gives oq — 1, ai 



and a2 = 0, yielding the theta series 



0^p-i(C)(9) = /iW* - 8/i(r)M4(r). 



(32) 



Theta series of the twelve odd 2-niodular lattices constructed in [53] are 
computed and shown in Table [2J as polynomials in /i and A4 for simplicity. 
Their weak secrecy gains are approximated using Mathematica |27 . 



4 Best knov^rn lattices 



Now that we have computed the weak secrecy gains of several 2- and 3-modular 
lattices, we want to compare them with the best unimodular lattices in their 
respective dimensions. Figure [2] compares the secrecy gains of the best uni- 
modular lattices with the weak secrecy gains of the 2- and 3-modular lattices 
we have computed. We can see that most of these even 2- and 3-modular lat- 
tices, indicated by disconnected big dots, outperform the unimodular lattices 
except in dimension 22, and three of the odd 2-modular lattices, indicated by 
disconnected small dots, outperform the unimodular lattices, in particular, in 
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3.0 



; II /i I 

-- ■».!„■/ : 



0.5 



5 10 15 20 

Dimension n 

Fig. 2 The weak secrecy gain of 2- and 3-inodular lattices vs. unimodular lattices as a 
function of the dimension n 



Table 3 List of 2- and 3-modular lattices out-performing the best unimodular lattices 



dim 


lattice 


I 


XA 


2 


Z^ 


1 


1 


2 


A2 


3 


> 1.01789 


4 


Z^ 


1 


1 


4 


Di 


2 


> 1.08356 


12 


Dt. 


1 


1.6 


12 


Kvi 


3 


> 1.66839 


14 


K)+ 


1 


1.77778 


14 


C2 X G(2, 3) 


3 


> 1.85262 


16 


{Di)+ 


1 


2 


16 


-^P'\C)real 


2 


> 2.06968 


16 


BWl6 


2 


> 2.20564 


18 


(Dir or (A-r 


1 


2.28571 


18 


^P'^CUal 


2 


> 2.35656 


20 


iAi)+ 


1 


2.66667 


20 


■:^p-'{cUai 


2 


> 2.70165 


20 


HS20 


2 


> 3.03551 


22 


(Ai^)+ 


1 


3.2 


22 


A2 X An 


3 


> 3.12527 



dimension 18, the odd 2-niodular lattice has the best secrecy gain known by 
now. 



Table [3] gives a list of 2- and S-modular lattices out-performing the best 
unimodular lattices. 
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5 Conclusion and future work 

This paper computes the weak secrecy gains of several known 2- and 3-niodular 
lattices in small dimensions. Most of the even 2- and 3-modular lattices and 
three of the odd 2-modular lattices have a higher secrecy gain than the best 
unimodular lattices. We then conclude that, at least in dimensions up to 23, 
2- and 3-modular lattices are better option for Gaussian wiretap channel. 

A line of future work would naturally be investigating ^-modular lattices 
for other values of i to understand if bigger £ allows better modular lattices in 
terms of secrecy gain. Also, more 2- and 3-modular lattice examples should be 
found to get a better understanding of why they have a higher secrecy gain, 
since a classification of such lattices is currently unavailable even in small 
dimensions. 
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